sigma-rules

Author SHA1 Message Date

Author	SHA1	Message	Date
Ruben Groenewoud	11168606d5	[Tuning] event.action and event.type change (#3495 ) Co-authored-by: Terrance DeJesus <99630311+terrancedejesus@users.noreply.github.com> (cherry picked from commit `9f8638a004`)	2024-03-13 09:16:45 +00:00
Ruben Groenewoud	f9a652ff78	[Tuning] Linux BBR Tuning - Part 2 (#3470 ) * [Tuning] Linux BBR Tuning - Part 2 * Update discovery_of_accounts_or_groups_via_builtin_tools.toml * Update discovery_process_discovery_via_builtin_tools.toml * Update discovery_hosts_file_access.toml * Update discovery_system_network_connections.toml --------- Co-authored-by: Colson Wilhoit <48036388+DefSecSentinel@users.noreply.github.com> (cherry picked from commit `7a0967924c`)	2024-03-07 11:40:41 +00:00
Ruben Groenewoud	7d8ee7fb34	[New BBR] Unix Socket Communication (#3072 ) * [New Rule] Unix Socket Communication * Update rules_building_block/execution_unix_socket_communication.toml Co-authored-by: Isai <59296946+imays11@users.noreply.github.com> * Update rules_building_block/execution_unix_socket_communication.toml --------- Co-authored-by: Isai <59296946+imays11@users.noreply.github.com> (cherry picked from commit `9807bebd8e`)	2023-10-23 15:25:11 +00:00

Ruben Groenewoud

11168606d5

[Tuning] event.action and event.type change (#3495 )

Co-authored-by: Terrance DeJesus <99630311+terrancedejesus@users.noreply.github.com>

(cherry picked from commit 9f8638a004)

2024-03-13 09:16:45 +00:00

Ruben Groenewoud

f9a652ff78

[Tuning] Linux BBR Tuning - Part 2 (#3470 )

* [Tuning] Linux BBR Tuning - Part 2

* Update discovery_of_accounts_or_groups_via_builtin_tools.toml

* Update discovery_process_discovery_via_builtin_tools.toml

* Update discovery_hosts_file_access.toml

* Update discovery_system_network_connections.toml

---------

Co-authored-by: Colson Wilhoit <48036388+DefSecSentinel@users.noreply.github.com>

(cherry picked from commit 7a0967924c)

2024-03-07 11:40:41 +00:00

Ruben Groenewoud

7d8ee7fb34

[New BBR] Unix Socket Communication (#3072 )

* [New Rule] Unix Socket Communication

* Update rules_building_block/execution_unix_socket_communication.toml

Co-authored-by: Isai <59296946+imays11@users.noreply.github.com>

* Update rules_building_block/execution_unix_socket_communication.toml

---------

Co-authored-by: Isai <59296946+imays11@users.noreply.github.com>

(cherry picked from commit 9807bebd8e)

2023-10-23 15:25:11 +00:00

3 Commits